Cybercrime

Cybercrime | News, how-tos, features, reviews, and videos

Attackers hid malware inside Oracle Database after SQL injection breach

Attackers chained SQL injection with Oracle’s embedded Java capabilities to hide a custom post-exploitation toolkit inside the database and gain SYSTEM-level access to the underlying Windows server.

Aug 6, 2026 4 mins

Data Breach Malware Vulnerabilities

Evidence points to cybercriminals stepping up their AI game

Reports from Cisco Talos and CrowdStrike provide real-world insights into how AI is evolving attackers’ tradecraft and becoming part of their day-to-day operations.

Aug 6, 2026 6 mins

Artificial Intelligence Cyberattacks Cybercrime

Enterprise passkey security under threat from malware

Trusted workflows can be misused to take over passkey-protected accounts if an attacker can first breach enterprise defenses and plant malware, researchers found; analysts say the issue is flaws in passkeys' supporting processes.

Aug 5, 2026 6 mins

Cyberattacks Cybercrime Identity and Access Management

OpenAI, Anthropic AI agents resorted to deception in new cybersecurity incidents

The incidents follow recent security evaluation breaches involving Hugging Face and Modal.

Aug 5, 2026 5 mins

Artificial Intelligence Cyberattacks Security

Arelion employs NETSCOUT Arbor DDoS protection products

This ensures its global customers with secure access to Arelion’s #1 ranked global internet backbone

Apr 8, 2026 6 mins

Cyberattacks Cybercrime DDoS

ChainDrop credential stealing worm infects over 400 npm packages

The Shai Hulud variant’s blast radius includes several highly popular packages thus far.. Security teams are urged to perform full audits of all developer machines.

Aug 4, 2026 5 mins

Cyberattacks Cybercrime Malware

The Minnesota attackers may hold a better backup of your plant than you do

Attribution is unresolved, but your exposure isn't. A practical playbook for the next 72 hours, 30 days and quarter based on the advisories — not the headlines.

Aug 4, 2026 11 mins

Critical Infrastructure Cyberattacks Cybercrime

Attackers are crafting malicious AI instruction files to turn your agents into quiet criminal helpers

Repositories with poisoned configuration files for AI agents are part of a larger trend that sees software supply chain attacks getting creative about initial access and malicious code execution.

Aug 4, 2026 8 mins

Artificial Intelligence Cyberattacks Cybercrime

After OpenAI, Anthropic finds Claude breached three organizations during cyber tests

Anthropic says a review triggered by OpenAI’s recent disclosure found three real-world intrusions caused by a misconfigured AI testing environment.

Jul 31, 2026 6 mins

Artificial Intelligence Cyberattacks IT Governance

Copilot worm can spread through Microsoft Word docs

Although there are a few ways to mitigate the risk, the only way to block it is to get AI to differentiate instructions from data, which is impossible today.

Jul 30, 2026 10 mins

Cyberattacks Cybercrime Vulnerabilities